Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Oct 2022 15:45:40 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 267052] security/teleport: Update to 4.4.12
Message-ID:  <bug-267052-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D267052

            Bug ID: 267052
           Summary: security/teleport: Update to 4.4.12
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: swills@FreeBSD.org
          Reporter: kraileth@elderlinux.org
             Flags: maintainer-feedback?(swills@FreeBSD.org)
          Assignee: swills@FreeBSD.org

Created attachment 237302
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D237302&action=
=3Dedit
Update security/teleport to version 4.4.12

The version of Teleport currently packaged by FreeBSD (4.3.9, from Dec. 202=
0!)
contains multiple known vulnerabilities and most components silently broke
since the port is getting compiled with Go 1.16 and higher. I tried to mail=
 the
maintainer last year but didn't get a response.

There has been an attempt by someone else to get the software updated
(https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D261459), but nothing
happened since January. This could be due to said effort being incomplete a=
nd
providing no update path (forcing existing clusters to be re-installed).

I've chosen the more comprehensive path of step-by-step upgrades. This first
step brings Teleport up to version 4.4.12, the final one in the 4.4 branch =
that
was released in March this year. It can be used to upgrade existing 4.3
installations and unbreaks several components with newer versions of Go. If=
 it
is committed, I intend to follow up an update to version 5.2.5.

The port description has been revised as Teleport evolved significantly sin=
ce
the port was introduced at version 2.5.6. This proposal passes "portlint -A=
C"
and a test build with Synth. I set up a test cluster with 4.3.9 nodes (pack=
age
built with old Go), updated the machines with this port and ensured that
Teleport still works. If this patch requires further work to be committed, =
I'll
be happy to do that.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-267052-7788>